Importing a Master Load Key (*KML)

Command: DB (Import KML). Can be used in online, offline or secure state.

Function:     To translate a double-length Master Load Key (*KML) from encryption under a Zone Master Key (*ZCMK) to encryption under Variant 2 of LMK pair 04-05. A check value for the *KML is also returned.

Inputs:        *ZMK, encrypted under LMK pair 04-05: 32 hexadecimal characters.
(Optional) Atalla Variant – 1 or 2 numeric digit; this value is required only if support for Atalla variants is set using the “CS” Console command.
*KML, encrypted under the *ZMK: 32 hexadecimal characters.

Outputs:     *KML, encrypted under Variant 2 of LMK pair 04-05.
*KML check value, formed by encrypting a block of binary zeros with the key and returning the left-most 24 bits of the result: 6 hexadecimal characters.

Errors:        Data invalid; please re-enter: - the entered value does not contain 32 hexadecimal characters or invalid ZMK variant was entered. Re-enter the correct number of characters.

Key parity error - the plaintext key does not have odd parity on each byte. Re-enter the correct value.

Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.

Example:

Online> DB <Return>

Enter *ZMK: XXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>

(Enter ZMK variant: V <Return>, if enabled by CS command).

Enter *KML: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>

*KML encrypted under LMK: YYYY YYYY YYYY YYYY YYYY YYYY YYYY YYYY

Key check value: ZZZZZZ